Collaborate Disseminate
We have separate WordPress installation directories in one webspace on the same User. (Wordpress_01, Wordpress_02…)
It is possible to block PHP script Actions between the directories? (is the best method using .htaccess?)
A few weeks ago… Continue reading How to encapsulate PHP subdirectories in Apache?
My professor gave me this task and said "Easy" about it!
I don’t know how serious is he!
The task :
I have a directory for example
www.example.com/items
The "items" directory contents :
AGDVGCVFVVCVGDD.txt
Dgcbvvhvbhvbb… Continue reading Bypass Options -Indexes in htaccess to view content
In .htaccess I’d like to have a rule to find out if a request is to a folder, before Apache redirects to the folder. If it is a forbidden folder, it should display my custom 404 page.
How can I do it?
Here is my attempt, where I want all s… Continue reading Apache .htaccess rule to hide folders [migrated]
I’m wondering if anyone knows how to approach this predicament I am facing using .htaccess.
I have a website that is accessible using 2 different domains. For one of the domains, I only want the website to be accessible to a subset of IPs … Continue reading Restrict access to specific http_host with .htaccess
My WordPress website received a couple of fake subscriptions to the newsletter. I identified the logs, most of them with the same form as below:
xx.xx.xx.xx example.com – [04/Feb/2023:06:01:42 +0100] "POST / HTTP/1.1" 200 207 &qu… Continue reading How to block a POST curl request
How can I block composer attacker access in Apache?
But keep composer working for the application?
I’m running Ubuntu and Apache, does anyone know?
I have some clients whose IP changes every day and static IP is not an option for them.
If I have them install a Dynamic DNS client, and then in my application .htaccess file refer to that Dynamic DNS domain, does that pose any security is… Continue reading Dynamic DNS threats for allow list access to an application
I have this project where I have a front and back.
My login file is simple if the login and password are in my database then I’m directed to a page in the back, otherwise I can’t go.
I login into the backoffice without a problem but I want… Continue reading .htaccess & .htpasswd [migrated]
This article explains why many WordPress websites have a lot of failed login attempts. It also explains what you can do to protect your WordPress website from failed login attacks.
The post Handling WordPress failed login attempts on your site appeared… Continue reading Handling WordPress failed login attempts on your site
As a security in-charge, I just noticed that one of our production web apps was attacked by some hackers. The attacker accessed the .git/objects/ files.
I already modified .htaccess to make .git and its content inaccessible.
The attacker … Continue reading Security implications of stolen .git/objects/ files